Date: Sun, 14 Jul 2002 18:33:23 +0300 From: Giorgos Keramidas <keramida@FreeBSD.org> To: Luigi Rizzo <luigi@FreeBSD.org> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/usr.bin/talk display.c talk.1 talk.c Message-ID: <20020714153323.GC36636@hades.hell.gr> In-Reply-To: <20020714082543.B74633@iguana.icir.org> References: <200207141408.g6EE8ilL034295@freefall.freebsd.org> <20020714151233.GA36636@hades.hell.gr> <20020714082543.B74633@iguana.icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--OwLcNYc0lM97+oe1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On 2002-07-14 08:25 +0000, Luigi Rizzo wrote: > On Sun, Jul 14, 2002 at 06:12:33PM +0300, Giorgos Keramidas wrote: > ... > > Damn. Now I can't use ps/who to find out who's talking to whom! > > but you can still see that they are using "talk". Yes, this (the command that one is running) is part of the information that `who' shows when security.bsd.see_other_uids=1 but hides when this is set to 0. Perhaps there is some more general way to stop people from seeing who talks to whom, and the command line arguments? Does see_other_uids already do that? If a more general solution exists, there is no point in trying to track down all the possible utilities and combinations of tools that can reveal sensitive information. I'm not against the change you did, if it sounded like this :) I was using a joke (my freshman fun times) to point out that there is a good reason behind it. But we need to check if see_other_uids or something similar cann already do the job for us, instead of hacking around the source whenever something like talk shows up. - Giorgos --OwLcNYc0lM97+oe1 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9MZnC1g+UGjGGA7YRAthbAJ9c5qMTvj297bbWZNdapVyUxZkRawCgtcqx Cj+FsPC76GKq4vs0v4VAzIg= =Paqx -----END PGP SIGNATURE----- --OwLcNYc0lM97+oe1-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020714153323.GC36636>